WordPress maintenance or security needs? Reach out!

TLDWP

Domain Security Report for vvashtcf.com

Domain Information

WordPress Version: Unknown

Theme: astra (used by 398,094 domains)

Last Checked: 2026-07-28 09:54:21

HTTPS: Yes

Plugins (14)

Plugin	Used By
accessible-poetry	3,759
am-builder-addon	701
am-form-power	49
am-locations	109
am-review-power	68
am-social-icons-pro	82
astra-addon	90,784
bb-plugin	84,419
gutenberg	146,899
instagram-feed-pro	31,897
my-advice-gallery	98
my-advice-specials	44
popup-maker	106,077
viva-hrt-oneclick	0

Security Headers

F

Grade F

5 missing headers

Missing headers:

Content-Security-Policy (CSP) — Prevents XSS attacks ?
X-Content-Type-Options — Prevents MIME sniffing ?
X-Frame-Options — Prevents clickjacking ?
Referrer-Policy — Controls referrer information ?
Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.